• v1.1.0 8071f4eac4

    usv 1.1.0
    Some checks failed
    Build and push Cloudron image / build-and-push (push) Waiting to run
    PR checks / rust-gates (push) Has been cancelled
    Stable

    greatpipes released this 2026-10-24 23:07:17 +00:00 | 3 commits to main since this release

    A maintenance release that also starts the Cloudron package again under a
    new identity.

    Security

    • TLS dependencies updated past six advisories. rustls 0.23.43 to
      0.23.46 (RUSTSEC-2026-0285, -0346, -0348, -0349), rustls-webpki 0.103.13
      to 0.103.16 (RUSTSEC-2026-0382) and tokio 1.53.1 to 1.54.1
      (RUSTSEC-2026-0386). Found by cargo deny while preparing this release;
      1.0.x carries them, which is why 1.0.x is no longer supported.

    Changed

    • The Cloudron package has a new identity: io.github.orcvole.unseenservant.
      The first listing used an id nobody chose on purpose (ADR 0013). It is
      withdrawn, and installs of v1.0.x on the old id are not migrated:
      Cloudron refuses to update an install across ids, so reinstall from the
      new listing and copy /app/data across to keep content and
      certificates. The versions feed keeps its URL and starts again empty.
    • The packager named in the manifest is OrcVole; the author is unchanged.
    • The source repository on our Forgejo moved to
      https://forgejo.unseenservant.dev/root/unseen-servant; every link in
      the docs, the capsule and the deb/rpm/AUR/Nix packaging now points there.
    • Built with Rust 1.99.1 (was 1.93.1); the Cloudron image's runtime is
      Alpine 3.24 (was 3.22).

    Verify: sha256sum -c SHA256SUMS, then rsign verify -p unseen-servant.pub -x <file>.minisig <file> with the key in assets/unseen-servant.pub.

    The binary in every artefact is extracted from the gated Cloudron image ghcr.io/orcvole/unseen-servant@sha256:49ff4e9257785625cc37a1930b4ae0af0c254bbb4737c357f9a9d53b2640d5c1.

    Downloads